AI + ML

GTIG says AI-powered hacking has moved well beyond phishing emails and chatbot tricks

Google says crooks already have AI cooking up zero-days, and claims one nearly escaped into the wild before the company stopped it.

In a report shared with The Register ahead of publication on Monday, Google’s Threat Intelligence Group said that it has identified what it believes is the first real-world case of cyber-baddies using AI to discover and weaponize a zero-day vulnerability in a planned mass-exploitation campaign.

The bug, a two-factor authentication bypass in a popular open source web-based administration platform, was reportedly developed by criminals working together on a large-scale intrusion operation.

GTIG said that the attackers appear to have used an AI model to both identify the flaw and help turn it into a usable exploit.…